/fuzzapi

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

Primary LanguageRubyMIT LicenseMIT

Fuzzapi

Fuzzapi is rails application which uses API_Fuzzer and provide UI solution for gem.

New Scan

scan body

Scan Result

scan

Scan Histoy

scan2

Setup

  1. Install ruby in your machine either using rvm or rbenv

  2. Clone the repository into your localmachine

  3. cd /path/Fuzzapi/bin, move to Fuzzapi directory

  4. bundle install to install the gem dependencies of the application

  5. rake db:migrate to creates tables, migrations etc.

  6. rails s to run the server and run export REDIS_URL=redis://127.0.0.1:6379/0 && bundle exec sidekiq to run sidekiq.

  7. Open http://localhost:3000 in browser which should point to the application url

Fuzzapi comes with Docker to simplify installation processing. Following commands will setup application using Docker.

  1. Clone the repository into your local machine

  2. cd /path/Fuzzapi, move to Fuzzapi directory

  3. Install Docker in your local machine

  4. Run docker-compose build to build the image locally.

  5. Run docker-compose up to run the server.

  6. Open http://localhost:3000 in browser which should point to the application url

Fuzzapi uses API_Fuzzer gem.

Authors: www.twitter.com/abhijeth; www.twitter.com/lalithr95; www.twitter.com/srini0x00